# /etc/strongswan.conf - strongSwan configuration file swanctl { load = random pem pkcs1 sha1 sha3 gmp x509 revocation constraints pubkey } charon-systemd { load = random nonce md5 sha1 sha2 sha3 aes hmac gcm kdf pem pkcs1 x509 revocation constraints pubkey curve25519 mgf1 gmp curl eap-tls kernel-netlink socket-default updown vici } libtls { version_max = 1.3 }